This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer File: 9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer (raw, json) Hash identifier: uISFgvzd337c2m/tZnmTNZjqjEUlcrlOwpSyRN3LGE8= Subject key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6BE700B42F1EF3BB9DDB4C665F66F8D6BB5A69B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:36:00 +0000 Certificate not after: Mon 18 Jan 2027 10:41:00 +0000 Subordinate resources: AS: 151291 IP: 49.128.4.0/22 IP: 103.31.236.0/22 IP: 103.244.116.0/22 IP: 223.29.252.0/22 IP: 2403:6380::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 16:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e7:00:b4:2f:1e:f3:bb:9d:db:4c:66:5f:66:f8:d6:bb:5a:69:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:36:00 2026 GMT Not After : Jan 18 10:41:00 2027 GMT Subject: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:a1:ca:9b:b4:51:7e:d1:73:76:24:90:84: d9:a2:8a:0d:fa:5a:f6:46:d6:d8:4e:d6:07:2c:5a: 0d:94:1a:73:d1:8c:48:fc:67:8b:22:bb:71:7c:f3: 3e:a3:ed:bc:9e:37:5b:86:c3:1a:e1:5c:9c:5f:5d: 06:99:6c:86:70:ce:34:69:ce:7a:9a:14:a5:2b:a2: 57:8a:eb:de:a6:e6:1c:6e:94:84:6a:4e:65:1b:12: 74:ae:3f:63:62:e2:95:9e:48:4b:3c:f1:87:35:9b: 16:27:1d:24:b0:23:ac:99:1a:85:b2:35:a5:37:8c: 67:b8:da:ae:40:e6:a7:62:8e:e3:9e:fc:be:ce:4f: 2e:f6:be:d0:ca:16:59:48:4d:89:d0:c2:36:da:27: 5b:db:8b:33:b7:65:64:93:d9:89:64:63:97:cd:f3: 19:f4:11:2d:2b:68:db:ae:a3:94:7f:9e:74:a5:45: 4a:9f:7e:44:65:2f:f6:e0:6f:52:b8:aa:3d:62:4f: 71:22:75:06:e5:1c:65:7e:a4:d8:c4:a3:83:9e:bd: 8b:fc:af:48:d0:1a:50:b7:6d:b6:3f:27:98:40:e3: cc:88:47:9c:ad:e4:ef:b0:51:83:79:42:98:5d:27: a6:6f:05:bc:48:e2:57:30:e2:93:90:19:f1:84:f8: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.4.0/22 103.31.236.0/22 103.244.116.0/22 223.29.252.0/22 IPv6: 2403:6380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151291 Signature Algorithm: sha256WithRSAEncryption 05:be:e3:54:cb:3f:12:2d:3d:bc:63:78:03:0d:47:0f:88:b5: 86:fc:41:70:ef:62:26:9a:d5:b9:76:b8:ee:6c:28:5d:da:1c: 16:da:8f:c3:f2:8b:2f:36:ed:be:1c:e8:b4:44:a2:94:f2:20: f5:cd:e6:1c:20:d3:7c:19:e6:47:d5:5b:b5:9d:bf:e5:1a:97: 58:6e:c6:23:7f:7a:82:8b:d5:4e:f8:4f:1f:38:61:67:8a:a5: 1a:0e:d9:d4:db:ef:d3:0b:2e:c8:78:45:92:9f:b5:af:65:66: f5:92:35:5a:1a:30:f8:70:b5:ed:4e:dd:b7:0f:0a:27:7b:ab: 4f:fd:21:05:3d:20:e6:98:81:4e:6b:aa:1c:49:a1:c3:03:04: f4:5b:dc:0c:7e:af:33:64:4b:f9:be:ac:9c:8f:ca:b3:4e:bb: 20:11:6e:e1:92:41:46:fa:af:2b:56:9c:e4:5d:6b:32:39:44: 01:6c:74:d3:9e:42:d8:2f:23:a1:a6:46:fe:39:e6:a2:51:f1: 46:74:96:e2:17:6b:8e:a5:13:e5:4b:00:06:2e:9d:bd:a8:50: 95:ed:8d:a8:eb:6f:74:76:3d:1b:5e:ba:18:42:a2:13:a0:e7: bd:ec:60:c2:52:8a:6a:f8:ff:b3:34:8a:5a:7a:5a:48:65:c1: be:62:30:94 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUa+cAtC8e87ud20xmX2b41rtaabYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzYwMFoX DTI3MDExODEwNDEwMFowMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQy RDgxQTdGNTA4NDMzOERCQzVDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA4ocqbtFF+0XN2JJCE2aKKDfpa9kbW2E7WByxaDZQac9GMSPxniyK7cXzz PqPtvJ43W4bDGuFcnF9dBplshnDONGnOepoUpSuiV4rr3qbmHG6UhGpOZRsSdK4/ Y2LilZ5ISzzxhzWbFicdJLAjrJkahbI1pTeMZ7jarkDmp2KO4578vs5PLva+0MoW WUhNidDCNtonW9uLM7dlZJPZiWRjl83zGfQRLSto266jlH+edKVFSp9+RGUv9uBv UriqPWJPcSJ1BuUcZX6k2MSjg569i/yvSNAaULdttj8nmEDjzIhHnK3k77BRg3lC mF0npm8FvEjiVzDik5AZ8YT4vUMCAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ5764ECMzaaR9Qtgaf1CEM428XIMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MDA1NTEyMTgyMTY5OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxODIxNjk4 LzAvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAIxgAQDBAJnH+wDBAJn9HQDBALfHfwwDQQCAAIw BwMFACQDY4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAk77MA0GCSqGSIb3DQEB CwUAA4IBAQAFvuNUyz8SLT28Y3gDDUcPiLWG/EFw72ImmtW5drjubChd2hwW2o/D 8osvNu2+HOi0RKKU8iD1zeYcINN8GeZH1Vu1nb/lGpdYbsYjf3qCi9VO+E8fOGFn iqUaDtnU2+/TCy7IeEWSn7WvZWb1kjVaGjD4cLXtTt23Dwone6tP/SEFPSDmmIFO a6ocSaHDAwT0W9wMfq8zZEv5vqycj8qzTrsgEW7hkkFG+q8rVpzkXWsyOUQBbHTT nkLYLyOhpkb+OeaiUfFGdJbiF2uOpRPlSwAGLp29qFCV7Y2o6290dj0bXroYQqIT oOe97GDCUopq+P+zNIpaelpIZcG+YjCU -----END CERTIFICATE-----Generated at Fri Jan 23 00:57:20 2026 by rpki-client